http://www.bkav.com.vn/tin_tuc_noi_bat/27/03/2009/2/2189/

http://www.itbusinessedge.com/cm/community/news/sec/blog/over-a-third-of-security-suites-fail-virus-bulletin-test-on-windows-vista/?cs=42767

Câu cuối cùng:

Microsoft's free security suite, Microsoft Security Essentials, achieved the VB100 award. 

Ba từ khoá quan trọng "Microsoft", "free" "VB100". 

Các thử nghiệm cho thấy kết quả báo giả cao. tập tin hợp pháp từ Corel, Roxio và Adobe thường không chính xác và bị chỉ định là bị nhiễm độc. Kingsoft và BKIS BKAV đạt kết quả đặc biệt là kém, trong khi bộ bảo mật miễn phí của Microsoft, Microsoft Security Essentials, đạt được giải thưởng VB100. 

Nói chung cứ Microsoft Security Essentials sử dụng cho nó lành ! HiHi ! 

chả hiểu gì cả 

http://www.microsoft.com/security/portal/ 

http://www.mediafire.com/?3hynymtvmij 

Đổi đuôi 7zip thành RAR và giải nén pass : 123456 

How to remove PC Protectar rogue anti-spyware

Malware Description:
PC Protectar (aka PCprotectar) is an unsafe application that was evidently designed to rob gullible computer users. Being a part of WiniGuard group of pseudo anti-spywares, PC Protectar acts in a very covert and cunning manner. PC Protectar does not install on to one’s computer like any regular program since it applies backdoor techniques to infiltrate and invade the host Operating System bit by bit. PC Protectar comes bundled with corrupt files (e.g. bogus multimedia codecs) downloaded from unsafe internet sources. The very moment PC Protectar finds itself inside your computer system, it creates some random files inside system32 directory, as well as drops some registry entries of its own. The above manipulations lead to PC Protectar activity being exhibited after every PC boot. You will keep experiencing fabricated system scanners (please see the screenshot below) and tons of other adware components such as system tray alerts, phony Windows Security Center GUIs etc., all of them reporting some threats that aren’t there in fact. If PCprotectar does succeed in misleading you, chances are it gets you paying for its licensed copy - which is the ultimate objective being pursued by hackers who are responsible for malvertising PC Protectar malware in the first place. Please do not trust PC Protectar software – it’s a misleading program aiming to rip you off. Be sure to remove PCprotectar scamware once you encounter its prankish activity on your machine.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

PC Protectar Free Scanner and Remover: Download Now

PC Protectar Screenshot:

PC Protectar

How to remove PC Protectar manually:
Manual removal of PC Protectar is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

* %Program Files%\PCprotectar Software
* %Program Files%\PCprotectar Software\PCprotectar
* %Program Files%\PCprotectar Software\PCprotectar\PCprotectar.exe
* %Program Files%\PCprotectar Software\PCprotectar\uninstall.exe
* %Documents and Settings%\All Users\Desktop\PCprotectar.lnk
* %Documents and Settings%\All Users\Start Menu\Programs\PCprotectar
* %Documents and Settings%\All Users\Start Menu\Programs\PCprotectar\1 PCprotectar.lnk
* %Documents and Settings%\All Users\Start Menu\Programs\PCprotectar\2 Homepage.lnk
* %Documents and Settings%\All Users\Start Menu\Programs\PCprotectar\3 Uninstall.lnk
* %Temp%\2jpyu297.exe
* %Temp%\azv3bjtk.exe
* %Temp%\oycn3nis.exe

The registry entries that need to be removed are as follows:

* HKEY_CURRENT_USER\Software\PCprotectar
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCprotectar
* HKEY_LOCAL_MACHINE\SOFTWARE\PCprotectar
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PCprotectar”

Please, be aware that manual removal of PC Protectar is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal PC Protectar, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.[ 

Theo Cộng Đồng Prevx
http://www.prevx.com/filenames/2426380247335041421-X1/REGBLCS.EXE.html 

For ActiveX developers, adds items to the shell context menu of DLLs and COXs that provides registration and unregistration - like running regsvr32, but much more convenient. 

Internet Security : Microsoft Security Essentials 1.0.1611.0

http://download.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/mssefullinstall-x86fre-en-us-xp.exe (Download for Windows XP 32-bit)
http://download.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/mssefullinstall-x86fre-en-us-vista-win7.exe (Download for Windows Vista/WIN7 32-bit)
http://download.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/mssefullinstall-amd64fre-en-us-vista-win7.exe (Download for Windows Vista/WIN7 64-bit)
 

Tải về - Đổi đuôi AR lại thành RAR - Pass giải nén là ninjaloves 

autostart.exe a variant of Win32/Injector.LR trojan 

Length Of Struc: 0218h
Length Of Value: 0034h
Type Of Struc: 0000h
Info: VS_VERSION_INFO
Signature: FEEF04BDh
Struc Version: 1.0
File Version: 1.0.0.0
Product Version: 1.0.0.0
File Flags Mask: 0.0
File Flags:
File OS: WINDOWS32
File Type: APP
File SubType: UNKNOWN
File Date: 00:00:00 00/00/0000

Struc has Child(ren). size: 444 bytes.

Child Type: VarFileInfo
Translation: 1033/1200

Child Type: StringFileInfo
Language/code Page: 1033/1200
CompanyName: Microsoft
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Project1
OriginalFilename: Project1.exe 

Norton Rating
Warning
Site Owner? Click here


so1.vn
Summary
•Computer Threats:
4
•Identity Threats:
0
•Annoyance factors:

0


Total threats on this site:
4


•Community Reviews:

0

The Norton rating is a result of Symantec's automated analysis system. Learn more.
The opinions of our users are reflected separately in the community rating on the right.
General Info
Web Site Location Viet Nam

Norton Safe Web has analyzed so1.vn for safety and security problems. Below is a sample of the threats that were found.

so1.vn
Threat Report

Total threats found: 4

Small-whitebg-red Security Risks (what's this?)

Threats found: 3
Here is a complete list:
Threat Name: HTTP MS Unsafe ActiveX Obj Instantiation
Location: http://autovn1.freehost10.com/


Threat Name: HTTP MS Unsafe ActiveX Obj Instantiation
Location: http://imgurl.filetac.com/img/01130750.html


Threat Name: Direct link to HTTP MS Unsafe ActiveX Obj Instantiation
Location: http://hi9x.so1.vn/


Small-whitebg-red Viruses (what's this?)

Threats found: 1
Here is a complete list:
Threat Name: Downloader
Location: http://hi9x.so1.vn/  

Đồng chí biết mình đang nói cái gì không vậy ? Cài Vista Transformation Pack để làm gì ở đây hả ?

P/s: đọc lại cho kỹ topic !